Cisco AMP on Big Sur: deploy without Network Extension

[p.costa]

Hi Cisco Community,

do you know if there is some way of deploying Cisco AMP without enabling the Network Extension that does traffic inspection?

We are having some compatibility issues with a printing software, and if we disable the Network Extension everything works correctly.

Since these issues are blocking a deploy on more than 2000 MacOS, we would like to understand if it's possible to easily deploy AMP without any kind of Network Extension, so at least we have ClamAV protection.

Many thanks!

[Troja007]

Hello @p.costa,
which version of the connector are you using? We recently released version, so i´m just wondering if version 1.15.5 is solving some network issues.
Greetings,
Thorsten

[p.costa]

Hi Thorsten,

thanks for the suggestion, we have also updated to 1.15.5.837, but unfortunately the issue is still there.

We are troubleshooting with TAC at the moment, but I wanted to check if I can find a workaround in the meantime.

Best Regards,

Pier

[p.costa]

We found a workaround apparently.

If we disable completely the network inspection on the policy through the AMP dashboard, and do a REBOOT of the affected machine, we are now able to print.

[Troja007]

Hello @p.costa,
good to hear that you have found a workaround, bad to heard that Secure Endpoint impacts the functionality of your endpoints.
Would it be possible to share the TAC case with me (PM), so i can take a look and also talking to engineering?
Thanks, Thorsten

[p.costa]

Thanks, PM sent!

[DaphneG]

@p.costa our Mac engineering department has already been notified. TAC will relay the updates as soon as we have it. Sorry for the inconvenience. 

[p.costa]

Thank you @DaphneG !!!